Read the docs
TI-2013-01001 Aliases CVE-2013-1154GHSA-vqqc-c6hg-29wf

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300…

Priority LOW 26CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.

Why it matters now

EPSS 0.01553 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 45

CPEVersionsRoleVendor
cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:*up to 1.2.7.76Running onCisco
cpe:2.3:h:cisco:200_series_smart_switches:sf200-24:*:*:*:*:*:*:*sf200-24VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sf200-24p:*:*:*:*:*:*:*sf200-24pVulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sf200-48:*:*:*:*:*:*:*sf200-48VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sf200-48p:*:*:*:*:*:*:*sf200-48pVulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-08:*:*:*:*:*:*:*sg200-08VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-08p:*:*:*:*:*:*:*sg200-08pVulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-18:*:*:*:*:*:*:*sg200-18VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-26:*:*:*:*:*:*:*sg200-26VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-26p:*:*:*:*:*:*:*sg200-26pVulnerableCisco
  • cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:* Versions up to 1.2.7.76 Running on ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sf200-24:*:*:*:*:*:*:* Versions sf200-24 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sf200-24p:*:*:*:*:*:*:* Versions sf200-24p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sf200-48:*:*:*:*:*:*:* Versions sf200-48 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sf200-48p:*:*:*:*:*:*:* Versions sf200-48p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-08:*:*:*:*:*:*:* Versions sg200-08 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-08p:*:*:*:*:*:*:* Versions sg200-08p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-18:*:*:*:*:*:*:* Versions sg200-18 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-26:*:*:*:*:*:*:* Versions sg200-26 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-26p:*:*:*:*:*:*:* Versions sg200-26p Vulnerable ·Cisco
Show 35 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:cisco:200_series_smart_switches:sg200-50:*:*:*:*:*:*:*sg200-50VulnerableCisco
cpe:2.3:h:cisco:200_series_smart_switches:sg200-50p:*:*:*:*:*:*:*sg200-50pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-08:*:*:*:*:*:*:*sf300-08VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-24:*:*:*:*:*:*:*sf300-24VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-24mp:*:*:*:*:*:*:*sf300-24mpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-24p:*:*:*:*:*:*:*sf300-24pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-48:*:*:*:*:*:*:*sf300-48VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf300-48p:*:*:*:*:*:*:*sf300-48pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf302-08:*:*:*:*:*:*:*sf302-08VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf302-08mp:*:*:*:*:*:*:*sf302-08mpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sf302-08p:*:*:*:*:*:*:*sf302-08pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-10:*:*:*:*:*:*:*sg300-10VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-10mp:*:*:*:*:*:*:*sg300-10mpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-10p:*:*:*:*:*:*:*sg300-10pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-10sfp:*:*:*:*:*:*:*sg300-10sfpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-20:*:*:*:*:*:*:*sg300-20VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-28:*:*:*:*:*:*:*sg300-28VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-28mp:*:*:*:*:*:*:*sg300-28mpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-28p:*:*:*:*:*:*:*sg300-28pVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-52:*:*:*:*:*:*:*sg300-52VulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-52mp:*:*:*:*:*:*:*sg300-52mpVulnerableCisco
cpe:2.3:h:cisco:300_series_managed_switches:sg300-52p:*:*:*:*:*:*:*sg300-52pVulnerableCisco
cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:*up to 1.2.7.76VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24:*:*:*:*:*:*:*sf500-24VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24p:*:*:*:*:*:*:*sf500-24pVulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48:*:*:*:*:*:*:*sf500-48VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48p:*:*:*:*:*:*:*sf500-48pVulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28:*:*:*:*:*:*:*sg500-28VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28p:*:*:*:*:*:*:*sg500-28pVulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52:*:*:*:*:*:*:*sg500-52VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52p:*:*:*:*:*:*:*sg500-52pVulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24:*:*:*:*:*:*:*sg500x-24VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24p:*:*:*:*:*:*:*sg500x-24pVulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48:*:*:*:*:*:*:*sg500x-48VulnerableCisco
cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48p:*:*:*:*:*:*:*sg500x-48pVulnerableCisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-50:*:*:*:*:*:*:* Versions sg200-50 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:200_series_smart_switches:sg200-50p:*:*:*:*:*:*:* Versions sg200-50p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-08:*:*:*:*:*:*:* Versions sf300-08 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-24:*:*:*:*:*:*:* Versions sf300-24 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-24mp:*:*:*:*:*:*:* Versions sf300-24mp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-24p:*:*:*:*:*:*:* Versions sf300-24p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-48:*:*:*:*:*:*:* Versions sf300-48 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf300-48p:*:*:*:*:*:*:* Versions sf300-48p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf302-08:*:*:*:*:*:*:* Versions sf302-08 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf302-08mp:*:*:*:*:*:*:* Versions sf302-08mp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sf302-08p:*:*:*:*:*:*:* Versions sf302-08p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-10:*:*:*:*:*:*:* Versions sg300-10 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-10mp:*:*:*:*:*:*:* Versions sg300-10mp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-10p:*:*:*:*:*:*:* Versions sg300-10p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-10sfp:*:*:*:*:*:*:* Versions sg300-10sfp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-20:*:*:*:*:*:*:* Versions sg300-20 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-28:*:*:*:*:*:*:* Versions sg300-28 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-28mp:*:*:*:*:*:*:* Versions sg300-28mp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-28p:*:*:*:*:*:*:* Versions sg300-28p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-52:*:*:*:*:*:*:* Versions sg300-52 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-52mp:*:*:*:*:*:*:* Versions sg300-52mp Vulnerable ·Cisco
  • cpe:2.3:h:cisco:300_series_managed_switches:sg300-52p:*:*:*:*:*:*:* Versions sg300-52p Vulnerable ·Cisco
  • cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:* Versions up to 1.2.7.76 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24:*:*:*:*:*:*:* Versions sf500-24 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24p:*:*:*:*:*:*:* Versions sf500-24p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48:*:*:*:*:*:*:* Versions sf500-48 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48p:*:*:*:*:*:*:* Versions sf500-48p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28:*:*:*:*:*:*:* Versions sg500-28 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28p:*:*:*:*:*:*:* Versions sg500-28p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52:*:*:*:*:*:*:* Versions sg500-52 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52p:*:*:*:*:*:*:* Versions sg500-52p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24:*:*:*:*:*:*:* Versions sg500x-24 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24p:*:*:*:*:*:*:* Versions sg500x-24p Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48:*:*:*:*:*:*:* Versions sg500x-48 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48p:*:*:*:*:*:*:* Versions sg500x-48p Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1154
  2. 2026-10-03 Alias added: GHSA-vqqc-c6hg-29wf

References

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences